Free tool · No upload · No sign-up

RADIUS Log Viewer

Reads FortiNAC, Microsoft NPS and FreeRADIUS logs and tcpdump -vv captures, groups each 802.1X/MAB exchange, and explains the result, including CoA/Disconnect and accounting. Built for large files: parsing runs in the background and only visible rows are drawn.

Supported logs and how to get them
  • FortiNAC: the RADIUS service log ([Access-Request] … ATTRIBUTES [ … ] lines).
  • Microsoft NPS: the accounting log (%SystemRoot%\System32\LogFiles\IN*.log) in either logging format — DTS/XML or IAS (ODBC, comma-separated) — or events 6272/6273/6274 copied from Event Viewer (Copy → Copy details as text).
  • FreeRADIUS: radiusd -X / freeradius -X debug output (v2 and v3), radius.log lines with auth = yes, and detail files from radacct/.
  • tcpdump: tcpdump -vv -n port 1812 or 1813 or 1645 or 1646 or 3799 text output.
  • You can load several files at once, even of different types.
Feedback
—

Stuck on an 802.1X or NAC rollout?

IPWOX designs and troubleshoots FortiNAC, NPS and Cisco 802.1X deployments. Send us the log and we'll tell you why devices land where they do and how to fix it.

Get help with NAC
Related IPWOX tools: RADIUS & SNMP Decoder · Cisco 802.1X NAC Config Generator · Syslog Triage — all free, all run in your browser. See all tools.